WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
participants-database
Published
2025-09-22
Title
Participants Database <= 2.7.7 - Contributor+ Stored XSS
Slug
particle-background
Published
2024-12-19
Title
Particle Background <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
partners
Published
2024-12-17
Title
Partners <= 0.2.0 - Unauthenticated PHP Object Injection
Slug
partners
Published
2025-01-14
Title
Partners <= 0.2.0 - Reflected Cross-Site Scripting
Slug
passbeemedia-web-push-notifications
Published
2025-02-26
Title
Passbeemedia Web Push Notifications <= 1.0.0 - Reflected XSS
Slug
passeum-ticketing
Published
2026-06-02
Title
Passeum Ticketing <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'shop_name' Setting
Slug
password-for-wp
Published
2024-12-11
Title
Password for WP < 1.6 - Stored XSS via CSRF
Slug
password-only-login
Published
2025-10-08
Title
Password only login <= 0.2 - Reflected Cross-Site Scripting
Slug
password-policy-manager
Published
2025-06-05
Title
Password Policy Manager < 2.0.5 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Slug
password-policy-manager
Published
2025-10-24
Title
Password Policy Manager | Password Manager < 2.0.6 - Missing Authorization to Authenticated (Subscriber+) Configuration Log Out
Slug
password-protect-page
Published
2023-01-10
Title
PPWP – WordPress Password Protect Page < 1.8.6 - Contributor+ Stored XSS in Shortcode
Slug
password-protect-page
Published
2024-02-07
Title
PPWP – Password Protect Pages < 1.9.0 - Protection Mechanism Bypass
Slug
password-protect-page
Published
2024-12-16
Title
PPWP – Password Protect Pages < 1.9.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
password-protect-page
Published
2025-07-24
Title
PPWP < 1.9.11 - Subscriber+ Access Bypass via REST API
Slug
password-protect-page
Published
2026-03-23
Title
PPWP – Password Protect Pages < 1.9.16 - Missing Authorization
Slug
password-protect-plugin-for-wordpress
Published
2025-01-16
Title
Password Protect Plugin for WordPress <= 0.8.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
password-protected
Published
2014-08-01
Title
Password Protected 1.4 - Login Process redirect_to Parameter Arbitrary Site Redirect
Slug
password-protected
Published
2023-06-13
Title
Password Protected < 2.6.3 - Admin+ Stored XSS
Slug
password-protected
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
password-protected
Published
2024-02-19
Title
Password Protected < 2.6.7 - Admin+ Stored XSS
Slug
password-protected
Published
2024-05-14
Title
Password Protected < 2.6.7 - Missing Authorization to Sensitive Information Exposure
Slug
password-protected
Published
2025-04-16
Title
Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products < 2.7.8 - Unauthenticated Sensitive Information Exposure
Slug
password-protected
Published
2025-10-24
Title
Password Protected < 2.7.12 - Unauthenticated Authorization Bypass via IP Address Spoofing
Slug
password-protected-woo-store
Published
2024-03-04
Title
Password Protected Store for WooCommerce < 2.3 - Unauthenticated Arbitrary Post Tile & Content Access
Slug
passwordless-login
Published
2014-11-13
Title
Passwordless Login Plugin - Multiple Input XSS